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AMENDMENTS TO THE CLAIMS 



1 1 . (original) A computer-readable medium carrying one or more sequences of 

2 instructions for authorizing a data communication session between a client and a 

3 first server, wherein execution of the one or more sequences of instructions by 

4 one or more processors causes the one or more processors to perform the steps of: 

5 receiving a request to establish the session, wherein the request is associated with 

6 a particular entity that is associated with the client; 

7 determining whether authorization of the session can be performed locally at a 

8 second server; 

9 . if authorization of the session can be performed locally at the second server, then 

1 0 informing the first server that the session may be established between the 

1 1 client and the first server for the particular entity; 

1 2 and after informing the first server, informing a third server that is 

1 3 associated with the particular entity that the session has been 

1 4 authorized to be established for the particular entity. 

1 2. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of: 

4 if authorization of the session cannot be performed locally at the second server, 

5 then, 

6 requesting the third server to authorize the session between the client and 

7 the first server; and 
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8 informing the first server, based on a response received from the third 

9 server, whether the session may be authorized. 

1 3. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of determining whether authorization of 

4 the session can be performed locally at the second server by performing the steps 

5 of:. 

6 determining a session counter value, wherein the session counter value indicates 

7 the number of sessions that are currently active for the particular entity; 

8 determining a session threshold value, wherein the session threshold value 

9 indicates a threshold as to a number of sessions that may be currently 

v. 

1 0 active before sessions cannot be authorized locally by the second server; 

11 and 

1 2 comparing the session counter value with the session threshold value to determine 
1 3 whether authorization of the session can be performed locally at the 

1 4 second server. 

1 4. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of determining whether authorization of 

4 the session can be performed locally at the second server by performing the step 

5 of: 
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6 determining whether the second server has received a prior request for the 

7 particular entity. 

1 5. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of: 

4 prior to receiving the request, maintaining data that is associated 

5 with the second server, wherein the data includes, 

6 a session counter value, wherein the session counter value indicates the 

7 number of sessions that are currently active for the particular 

8 entity; and 

9 a session threshold value, wherein the session threshold value indicates a 
1 0 particular number of sessions that may be currently active before 
1 1 sessions cannot be authorized locally by the second server. 

1 6. (original) The computer-readable medium of claim 5 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of maintaining data that is associated with 

4 the second server by performing the step of: 

5 maintaining a server identifier, wherein the server identifier identifies a particular 

6 server that is assigned to the particular entity. 

1 7. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 
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3 or more processors to perform the step of receiving the request to establish the 

4 session by performing the step of: 

5 receiving a connection request, wherein the connection request requests 

6 authorization to establish a Point-to-Point Protocol connection between the 

7 client and the first server. 

8 8. (original) The computer-readable medium of claim 1 wherein execution of the 

9 one or more sequences of instructions by one or more processors causes the one 

1 0 or more processors to perform the step of: 

1 1 identifying the third server by retrieving global data, wherein the global data maps 
1 2 a particular server to each of one or more entities. 

1 9. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of: 

4 identifying the third server by retrieving a server identifier, wherein the server 

5 identifier identifies a particular server that is assigned to the particular 

6 entity. 

1 10. (original) The computer-readable medium of claim 1 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of informing the third server by 

4 performing the steps of: 

5 determining, at the third server, whether other servers have previously authorized 

6 sessions for the particular entity; and 
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7 if other servers have previously authorized sessions for the particular entity, then 

8 informing the other servers that the session has been authorized for the 

9 particular entity. 

1 11. (original) The computer-readable medium of claim 1 0 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of: 

4 prior to informing the other servers, 

5 maintaining session counter values at each of the other servers, wherein 

6 the session counter values indicate the number of sessions that are 

7 currently active for the particular entity; and 

8 after being informed that the session has been authorized for the particular entity, 

9 updating the session counter values at each of the other servers to reflect 
1 0 that the session has been authorized for the particular entity. 

1 12. (original) The computer-readable medium of claim 1, wherein the request to 

2 establish a session is encrypted to maintain a secure communication, and wherein 

3 execution of the one or more sequences of instructions by one or more processors 

4 causes the one or more processors to perform the steps of receiving the request 

5 based on the encrypted request. 

1 13. (original) The computer-readable medium of claim 1 , wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of informing the first server by informing 

4 with an encrypted communication. 
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1 14. (original) The computer-readable medium of claim 1, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of informing the third server by informing 

4 with an encrypted communication. 

1 15. (original) The computer-readable medium of claim 1, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of: 

4 receiving at the second server a connection termination message indicating that a 

5 session that was authorized locally at the second server has terminated. 

6 16. (original) The computer-readable medium of claim 1 5, wherein execution of the 

7 one or more sequences of instructions by one or more processors causes the one 

8 or more processors to perform the steps of: 

9 identifying an authoritative server assigned to the particular entity; and 

1 0 if the second server is identified as the authoritative server for the particular 

1 1 entity, then 

1 2 updating global session information of the second server to reflect 

1 3 termination of the terminated session. 

1 17. (original) A computer-readable medium carrying one or more sequences of 

2 instructions for broadcasting session information to one or more servers, wherein 

3 execution of the one or more sequences of instructions by one or more processors 

4 causes the one or more processors to perform the steps of: 
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5 receiving a message from a first server, wherein the message indicates that a 

6 session has been authorized for a particular entity; 

7 determining whether one or more other servers have previously authorized 

8 sessions for the particular entity; and 

9 if one or more other servers have previously authorized sessions for the particular 

1 0 entity, then 

1 1 informing the one or more other servers that another session has been 
1 2 authorized for the particular entity. 

1 18. (original) The computer-readable medium of claim 17 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of: 

4 4 prior to receiving the message from the first server, 

5 maintaining data that is associated with a second server, wherein the data includes 

6 a session counter value, wherein the session counter value indicates the 

7 number of sessions that are currently active for the particular 

8 entity; and 

9 a server list, wherein the server list identifies the one or more other servers 
1 0 that have previously authorized sessions for the particular entity. 

1 1 9. (currently amended) A computer-readable medium carrying one or more 

2 sequences of instructions for authorizing a data communication session between a 

3 client and a server in a network, wherein execution of the one or more sequences 
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4 of instructions by one or more processors causes the one or more processors to 

5 perform the steps of: 

6 receiving a connection request at a distributed session counter for authorization to 

7 establish a session between the client and the server, wherein the 

8 connection request is associated with a particular entity; 

9 determining whether authorization of the session can be performed locally at the 

1 0 distributed session counter; 

1 1 if authorization of the session can be performed locally at the distributed session 
1 2 counter, then 

1 3 sending an authorization granted message to the server to indicate that the 

1 4 session may be established between the client and the server for 

1 5 the particular entity; 

1 6 identifying an authoritative distributed session counter that is associated 

1 7 with the particular entity; and 

1 8 after sending the authorization granted message to the server, sending a 

1 9 authorization update message to the authoritative distributed 

20 session counter, wherein the authorization update message notifies 

2 1 the authoritative distribution distributed session counter that the 

22 session has been authorized to be established for the particular 

23 entity. 

1 20. (currently amended) The computer-readable medium of claim 19 wherein 

2 execution of the one or more sequences of instructions by one or more processors 

3 causes the one or more processors to perform the steps of: 
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4 if authorization of the session cannot be performed locally at the distributed 

5 session counter, then 

6 sending an authorization request message to the authoritative distributed 

7 session counter to request authorization to authorize the session 

8 between the client and the server; and 

9 sending a response to the server based on a response message that is 

1 0 received from the authoritative distributed session counter , wherein 

1 1 the response message indicates whether the session should be " 

1 2 authorized. 

1 21. (original) The computer-readable medium of claim 19, wherein global session 

2 threshold values are assigned to indicate thresholds as to a number of sessions that 

3 may be concurrently active for each of a plurality of entities, and wherein a 

4 particular user is associated with two or more entities of the plurality of entities, 

5 and wherein execution of the one or more sequences of instructions by one or 

6 more processors causes the one or more processors to perform the step of: 

7 for the particular user, determining whether authorization of the session can be 

8 performed, by, 

9 for each of the two or more entities, comparing the global threshold value 

1 0 with the number of active sessions for the corresponding entity; 

11 and 

1 2 if the number of active sessions for any of the entities is greater or equal to 

1 3 the corresponding global threshold value, then denying 

1 4 authorization of the session. 
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1 22. (original) The computer-readable medium of claim 19 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of determining whether authorization of 

4 the session can be performed locally at the distributed session counter by 

5 performing the steps of: 

6 determining a local session counter value, wherein the local session counter value 

7 indicates the number of sessions that are currently active for the particular 

8 entity; 

9 determining a local session threshold value, wherein the local session threshold 

1 0 value indicates a threshold as to a number of sessions that may be 

1 1 currently active before sessions cannot be authorized locally by the 
1 2 distributed session counter; and 

1 3 comparing the local session counter value with the local session threshold value to 

1 4 determine whether authorization of the session can be performed locally at 

1 5 the distributed session counter. 

1 23. (original) The computer-readable medium of claim 19, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of: 

4 maintaining distributed session information, wherein the distributed session 

5 information includes over-subscription information that identifies for the 

6 distributed session counter the number of times that the number of 
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sessions established for a particular user or group of users was greater than 
the number authorized. 

(original) The computer-readable medium of claim 19 wherein execution of the 
one or more sequences of instructions by one or more processors causes the one 
or more processors to perform the step of determining whether authorization of 
the, session can be performed locally at the distributed session counter by 
performing the step of: 

determining whether the distributed session counter has received a prior 
connection request for the particular entity. 

(original) The computer-readable medium of claim 19 wherein execution of the 
one or more sequences of instructions by one or more processors causes the one 
or more processors to perform the step of: 
prior to receiving the connection request, 

maintaining a connection data storage area, wherein the connection data 
storage area includes 

» 

a local session counter value, wherein the local session counter 
value indicates the number of sessions that are currently 
active for the particular entity; and 

a local session threshold value, wherein the local session threshold 
value indicates a particular number of sessions that may be 
currently active before sessions cannot be authorized 
locally by the distributed session counter. 
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1 26. (original) The computer-readable medium of claim 25 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of maintaining the connection data storage 

4 area by performing the step of: 

5 maintaining an authoritative distributed session counter identifier, wherein the 

6 authoritative distributed session counter identifier identifies a particular 

7 authoritative distributed session counter that is assigned to the particular 

8 entity. 

1 27. (original) The computer-readable medium of claim 19 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of identifying the authoritative distributed 

4 session counter by performing the step of: 

5 interfacing with a global storage area, wherein the global storage area maps a 

6 particular authoritative distributed session counter to each entity. 

1 28. (original) The computer-readable medium of claim 19 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of identifying the authoritative distributed 

4 session counter by performing the step of: 

5 retrieving an authoritative distributed session counter identifier, wherein the 

6 authoritative distributed session counter identifier identifies the 

7 authoritative distributed session counter that is assigned to the particular 

8 entity. 
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1 29. (original) The computer-readable medium of claim 19 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of sending the authorization update 

4 message to the authoritative distributed session counter by performing the steps 

5 of: 

6 determining, by the authoritative distributed session counter, whether other 

7 distributed session counters have previously authorized sessions for the 

8 particular entity; and 

9 if other distributed session counters have previously authorized sessions for the 

1 0 particular entity, then broadcasting an update message to the other 

1 1 distributed session counters to indicate that another session has been 

I 2 authorized for the particular entity. 

1 30. (original) The computer-readable medium of claim 29 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of: 

4 prior to the other distributed session counters receiving the update message, 

5 maintaining a local session counter value at each of the other distributed 

6 session counters, wherein the local session counter value indicates 

7 the number of sessions that are currently active for the particular 

8 entity; and 

9 after receiving the update message, 

1 0 updating the local session counter value at each of the other distributed 

I I session counters based on the update message. 



• Seq. No. 5528 



Attorney Docket No. 50325-0646 



1 31. (original) The computer-readable medium of claim 1 9, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of receiving the connection request, 

4 sending an authorization granted message, and sending an authorization update 

5 message with an encrypted communication. 

1 32. (original) The computer-readable medium of claim 1 9, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the step of: 

4 maintaining distributed session information, wherein the distributed session 

5 information includes connection identity information that identifies for the 

6 distributed session counter the server and associated port used to establish 

7 the session. 

1 33. (original) The computer-readable medium of claim 19, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of: 

4 receiving at the distributed session counter a connection termination message 

5 indicating that a session that was authorized locally at the distributed 

6 session counter has terminated; 

7 if the distributed session counter was identified as the authoritative distributed 

8 session counter for the particular entity, then 

9 updating global session information of the distributed session counter to 
1 0 reflect termination of the terminated session; 
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1 1 identifying other distributed session counters that have sent an 

1 2 authorization request for the particular entity; and 

I 3 broadcasting a session termination message to the other distributed session 
1 4 counters indicating that the session has terminated. 

1 34. (original) The computer-readable medium of claim 33, wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of: 

4 if the distributed session counter was not identified as the authoritative distributed 

5 session counter for the particular entity, then 

6 sending a session termination message to the authoritative distributed 

7 session counter indicating that the session has terminated. 

1 35. (original) A computer-readable medium carrying one or more sequences of 

2 instructions for broadcasting session update information to distributed session 

3 counters, wherein execution of the one or more sequences of instructions by one 

4 or more processors causes the one or more processors to perform the steps of: 

5 receiving an authorization update message from a distributed session counter, 

6 wherein the authorization update message indicates that a session has been 

7 authorized for a particular entity; 

8 determining whether other distributed session counters have previously authorized 

9 sessions for the particular entity; and 

1 0 if other distributed session counters have previously authorized sessions for the 

I I particular entity, then broadcasting an update message to the other 
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1 2 distributed session counters, wherein the update message notifies the other 

I 3 distributed session counters that another session has been authorized for 
1 4 the particular entity. 

1 36. (original) The computer-readable medium of claim 35 wherein execution of the 

2 one or more sequences of instructions by one or more processors causes the one 

3 or more processors to perform the steps of: 

4 prior to receiving the authorization update message, 

5 maintaining a connection data storage area, wherein the connection data storage 

6 area includes 

7 a global session counter value, wherein the global session counter value 

8 indicates a global value of the number of sessions that are currently 

9 active for the particular entity; and 

1 0 a local distributed session counter list, wherein the local distributed 

I I session counter list identifies the other distributed session counters 
1 2 that have previously authorized sessions for the particular entity. 

1 37. (currently amended) A computer apparatus comprising: 

2 a processor; and 

3 a memory coupled to the processor, the memory containing one or more 

4 sequences of instructions for authorizing a data communication session 

5 between a client and a server in a network, wherein execution of the one 

6 or more sequences of instructions by the processor causes the processor to 

7 perform the steps of: 
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8 receiving a connection request at a distributed session counter for 

9 authorization to establish a session between the client and the 

1 0 server, wherein the connection request is associated with a 

1 1 particular entity; 

1 2 determining whether authorization of the session can be performed locally 

1 3 at the distributed session counter; 

1 4 if authorization of the session can be performed locally at the distributed 

1 5 session counter, then 

1 6 sending an authorization granted message to the server to indicate 

1 7 that the session may be established between the client and 

1 8 the server for the particular entity; 

1 9 identifying an authoritative distributed session counter that is 

20 associated with the particular entity; and 

2 1 after sending the authorization granted message to the server, 

22 sending a authorization update message to the authoritative 

23 distributed session counter, wherein the authorization 

24 update message notifies the authoritative distribution 

2 5 distributed session counter that the session has been 
26 authorized to be established for the particular entity. 

1 38. (currently amended) The computer apparatus of claim 37, wherein execution of 

2 the one or more sequences of instructions by the processor causes the processor to 

3 perform the steps of: 
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4 if authorization of the session cannot be performed locally at the distributed 

5 session counter, then 

6 sending an authorization request message to the authoritative distributed 

7 session counter to request authorization to authorize the session 

8 between the client and the server; and 

«. 

9 sending a response to the server based on a response message that is 

1 0 received from the authoritative distributed session counter , wherein 

1 1 the response message indicates whether the session should be 

1 2 authorized. 

1 39. (original) The computer apparatus of claim 37, wherein execution of the one or 

2 more sequences of instructions by the processor causes the processor to perform 

3 the steps of determining whether authorization of the session can be performed 

4 locally at the distributed session counter by performing the steps of: 

5 determining a local session counter value, wherein the local session counter value 

6 indicates the number of sessions that are currently active for the particular 

7 entity; 

8 determining a local session threshold value, wherein the local session threshold 

9 value indicates a threshold as to a number of sessions that may be 

1 0 currently active before sessions cannot be authorized locally by the 

1 1 distributed session counter; and 

1 2 comparing the local session counter value with the local session threshold value to 

1 3 determine whether authorization of the session can be performed locally at 

1 4 the distributed session counter. 
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1 40. (original) The computer apparatus of claim 37, wherein execution of the one or 

2 more sequences of instructions by the processor causes the processor to perform 

3 the steps of: 

4 prior to receiving the connection request, 

5 maintaining a connection data storage area, wherein the connection data 

6 storage area includes 

7 a local session counter value, wherein the local session counter 

8 value indicates the number of sessions that are currently 

9 active for the particular entity; and 

1 0 a local session threshold value, wherein the local session threshold 

1 1 value indicates a particular number of sessions that may be 
1 2 currently active before sessions cannot be authorized 

1 3 locally by the distributed session counter. 

1 41. (original) The computer apparatus of claim 37, wherein the distributed session 

2 counter is constituent to an Authentication, Authorization, and Accounting server. 

1 42. (original) A computer apparatus comprising: 

2 a processor; and 

3 a memory coupled to the processor, the memory containing one or more 

4 sequences of instructions for broadcasting session update information to 

5 distributed session counters, wherein execution of the one or more 

6 sequences of instructions by the processor causes the processor to perform 

7 the steps of: 
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8 receiving an authorization update message from a distributed session 

9 counter, wherein the authorization update message indicates that a 
1 0 session has been authorized for a particular entity; 

1 1 determining whether other distributed session counters have previously 

1 2 authorized sessions for the particular entity; and 

1 3 if other distributed session counters have previously authorized sessions 

1 4 for the particular entity, then broadcasting an update message to 

1 5 the other distributed session counters, wherein the update message 

1 6 notifies the other distributed session counters that another session 

I 7 has been authorized for the particular entity. 

1 43. (original) An apparatus for authorizing a data communication session between a 

2 client and a first server, the apparatus comprising: 

3 means for receiving a request to establish the session, wherein the request is 

4 associated with a particular entity that is associated with the client; 

5 means for determining whether authorization of the session can be performed 

6 locally at a second server; 

7 if authorization of the session can be performed locally at the second server, then 

8 means for informing the first server that the session may be established 

9 between the client and the first server for the particular entity; and 
1 0 means for informing a third server that is associated with the particular 

I I entity that the session has been authorized to be established for the 
1 2 particular entity after informing the first server. 



Seq. No. 5528 



Attorney Docket No. 50325-0646 



1 44. (original) An apparatus for broadcasting session information to one or more 

2 servers, the apparatus comprising: 

3 means for receiving a message from a first server, wherein the message indicates 

4 that a session has been authorized for a particular entity; 

5 means for determining whether one or more other servers have previously 

6 authorized sessions for the particular entity; and 

7 if one or more other servers have previously authorized sessions for the particular 

8 entity, then means for informing the one or more other servers that another 

9 session has been authorized for the particular entity. 

1 45. (currently amended) An apparatus for authorizing a data communication session 

2 between a client and a server in a network, the apparatus comprising: 

3 means for receiving a connection request at a distributed session counter for 

4 authorization to establish a session between the client and the server, 

5 wherein the connection request is associated with a particular entity; 

6 means for determining whether authorization of the session can be performed 

7 locally at the distributed session counter; 

8 if authorization of the session can be performed locally at the distributed session 

9 counter, then 

1 0 means for sending an authorization granted message to the server to 

1 1 indicate that the session may be established between the client and 

1 2 the server for the particular entity; 
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1 3 means for identifying an authoritative distributed session counter that is 

1 4 associated with the particular entity; and 

1 5 means for sending a authorization update message to the authoritative 

1 6 distributed session counter, wherein the authorization update 

1 7 message notifies the authoritative distribution distributed session 

1 8 counter that the session has been authorized to be established for 

I 9 the particular entity after sending the authorization granted 
20 message to the server. 

1 46. (original) An apparatus for broadcasting session update information to distributed 

2 session counters, the apparatus comprising: 

3 means for receiving an authorization update message from a distributed session 

4 counter, wherein the authorization update message indicates that a session 

5 has been authorized for a particular entity; 

6 means for determining whether other distributed session counters have previously 

7 authorized sessions for the particular entity; and 

8 if other distributed session counters have previously authorized sessions for the 

9 particular entity, then 

1 0 means for broadcasting an update message to the other distributed session 

I I counters, wherein the update message notifies the other distributed 
1 2 session counters that another session has been authorized for the 

1 3 particular entity. 

1 
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